Opened 16 years ago
Closed 16 years ago
#174 closed defect (worksforme)
Meta-Data-Search underruns security
| Reported by: | FrankJaeger | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | 2.6 release |
| Component: | tools | Version: | 2.4.4 |
| Keywords: | Metadata | Cc: |
Description
EN:
Security in Mapbender depends on User-GUI-WMS. If a User has no rights to see Data in a wms, the admin don't give him a GUI with this wms.
But Meta-Data-Search allows a User to import every wms of the mapbender-instance to his gui.
DE:
In einer Installation mit mehrene Mandanten (z.B. Gemeinden mit getrenntem Gebiet) werden bei der Metadatensuche auch wms aus anderen Gebieten (von anderen Mandanten) angeboten. Das ist für einen Rechenzentrums-Betrieb unbrauchbar. Jeder User sollte bei der Metadatensuche nur wms angeboten bekommen, auf die er ueber GUI und WMS vom Admin berechtigt wurde.
Change History (1)
comment:1 by , 16 years ago
| Milestone: | 2.5 release → 2.6 release |
|---|---|
| Resolution: | → worksforme |
| Status: | new → closed |
Note:
See TracTickets
for help on using tickets.
Are you talking about
mod_gazetteerMetadata.php
I checked this file and everything is fine. It only selects the layers of WMS that you have permission to access.
I'm closing this ticket and deferring it to 2.6. If you have additional information, please supply them when reopening the ticket